KB Home | Synchronizing Users and Groups with Azure AD
PaperCut’s strength has long been in our ability to support user and group synchronization with many directory services. This capability has now been tested against directory services hosted in the cloud, such as Azure AD. For PaperCut customers, this means you no longer need to have an on-site Active Directory server. PaperCut can sync directly with, and authenticate users against Azure AD using Secure LDAP; Microsoft’s LDAP interface hardened to support authentication across less secured networks such as the internet.
This article will step you through enabling the Secure LDAP interface on Azure AD, and successfully connecting an instance of PaperCut to this cloud source.
Enable Secure LDAP in Azure AD Domain Services
You will need,
A certificate to enable secure communication
Use PKCS#12 (PFX in Microsoft terms)
2048-bit is recommended
Password protected (i.e. includes the private key)
This release contains an updated Java version which no longer supports 32-bit workstations. If you have any 32-bit users launching the User Client or Release Station from a network share, see this Knowledge Base article for more information.